{"api_version":"1","generated_at":"2026-07-23T08:46:06+00:00","cve":"CVE-2009-3733","urls":{"html":"https://cve.report/CVE-2009-3733","api":"https://cve.report/api/cve/CVE-2009-3733.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-3733","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-3733"},"summary":{"title":"CVE-2009-3733","description":"Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-11-02 15:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/36842","name":"http://www.securityfocus.com/bid/36842","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"VMware Products Directory Traversal Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1023088","name":"http://securitytracker.com/id?1023088","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityTracker.com Archives - VMware Server Directory Traversal Flaw Lets Remote Users Obtain Arbitrary Files","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html","name":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"[Security-announce] VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/37186","name":"http://secunia.com/advisories/37186","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"VMware Products Directory Traversal File Disclosure Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","name":"http://security.gentoo.org/glsa/glsa-201209-25.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Gentoo Linux Documentation\n--\n  VMware Player, Server, Workstation: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded","name":"http://www.securityfocus.com/archive/1/507523/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/3062","name":"http://www.vupen.com/english/advisories/2009/3062","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1023089","name":"http://securitytracker.com/id?1023089","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityTracker.com Archives - VMware ESX/ESXi Directory Traversal Flaw Lets Remote Users Obtain Arbitrary Files","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html","name":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"VMSA-2009-0015","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3733","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3733","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"3733","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"esx","cpe6":"3.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"esx","cpe6":"3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"esxi","cpe6":"3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.1_build_29996","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.4_build_56528","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"1.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"2.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3733","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"server","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:38:30.348Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"GLSA-201209-25","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml"},{"name":"oval:org.mitre.oval:def:7822","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822"},{"name":"ADV-2009-3062","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/3062"},{"name":"1023089","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1023089"},{"name":"[security-announce] 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html"},{"name":"36842","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/36842"},{"name":"37186","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/37186"},{"name":"20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded"},{"name":"1023088","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1023088"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-10-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"GLSA-201209-25","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml"},{"name":"oval:org.mitre.oval:def:7822","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822"},{"name":"ADV-2009-3062","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/3062"},{"name":"1023089","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1023089"},{"name":"[security-announce] 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html"},{"name":"36842","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/36842"},{"name":"37186","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/37186"},{"name":"20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded"},{"name":"1023088","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1023088"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-3733","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"GLSA-201209-25","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-201209-25.xml"},{"name":"oval:org.mitre.oval:def:7822","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822"},{"name":"ADV-2009-3062","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/3062"},{"name":"1023089","refsource":"SECTRACK","url":"http://securitytracker.com/id?1023089"},{"name":"[security-announce] 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues","refsource":"MLIST","url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html"},{"name":"36842","refsource":"BID","url":"http://www.securityfocus.com/bid/36842"},{"name":"37186","refsource":"SECUNIA","url":"http://secunia.com/advisories/37186"},{"name":"20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded"},{"name":"1023088","refsource":"SECTRACK","url":"http://securitytracker.com/id?1023088"},{"name":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-3733","datePublished":"2009-11-02T15:00:00.000Z","dateReserved":"2009-10-20T00:00:00.000Z","dateUpdated":"2024-08-07T06:38:30.348Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-11-02 15:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B6F7416-E694-4EC9-9FE5-0C24448ECB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"73EC33AB-E92A-4AA8-A523-C341133BB515"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53197903-0614-4460-8944-C1B5257D71A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*","matchCriteriaId":"EB051A5C-5F66-4732-949A-48B0FDE4AFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F037B05F-6F92-4BE1-B672-F677CBEFD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4_build_56528:*:*:*:*:*:*:*","matchCriteriaId":"87489138-7756-453C-A149-F2C4F95EFF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42049891-38B7-4BB7-8DA5-A87169E2D958"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"07139DF7-C36B-4FED-8558-7FA49BE0BCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E0D7307-5946-45DC-88D3-6BC72EF50184"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"89699BB6-9E41-41DC-B597-B45CA05313A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A2543D5-AE09-4E90-B27E-95075BE4ACBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6CFDD84-A482-42C2-B43F-839F4D7F1130"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"3733","Ordinal":"1","Title":"CVE-2009-3733","CVE":"CVE-2009-3733","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"3733","Ordinal":"1","NoteData":"Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors.","Type":"Description","Title":"CVE-2009-3733"},{"CveYear":"2009","CveId":"3733","Ordinal":"2","NoteData":"2009-11-02","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"3733","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}